Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File:                     8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier:          3SAsBPg/jYDQUwU2teeqJIyEhRSiZxMu/itxMo582qI=
Subject key identifier:   DD:25:A7:16:D5:8E:7E:FF:4C:31:25:FA:03:61:C3:42:E6:4D:FF:F6
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer:       /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial:       0198748786DB736FF12E007B29F8264E80F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 10:01:35 +0000
Manifest this update:     Mon 04 Aug 2025 10:01:35 +0000
Manifest next update:     Tue 05 Aug 2025 10:01:35 +0000
Files and hashes:         1: 6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa (hash: oripnuB9VSq+/2+WmWeFeymLsX3aSd+Xhezj6MQbB30=)
                          2: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: gv0jyI+wpZhGJdg5TjtIO4VoN5oJXFBNtNtiIsz+aFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:87:86:db:73:6f:f1:2e:00:7b:29:f8:26:4e:80:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
        Validity
            Not Before: Aug  4 10:01:35 2025 GMT
            Not After : Aug  5 10:01:35 2025 GMT
        Subject: CN=dd25a716d58e7eff4c3125fa0361c342e64dfff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:de:aa:10:54:3a:3a:1f:15:58:74:e4:5b:
                    e0:4d:91:0f:f1:85:31:09:3b:4a:32:21:7e:9a:98:
                    22:c0:a8:8e:5c:f3:e9:17:b5:98:a1:01:3f:53:98:
                    0d:f6:8c:5c:12:2d:1d:2c:8c:41:16:09:c7:e6:98:
                    ee:ac:da:5d:07:ad:2a:fe:9d:a3:0d:28:88:4a:42:
                    c4:c2:24:89:73:02:4b:25:ef:8b:80:eb:b8:1c:95:
                    33:1f:7c:aa:8e:a2:8b:68:46:24:85:94:8f:24:06:
                    a8:dc:38:c4:63:17:db:b5:be:d7:e2:c5:e8:b5:eb:
                    7d:c3:c7:19:50:a6:51:02:9a:c6:2a:a7:f6:56:4e:
                    48:58:24:6b:4c:f8:8a:66:ed:8d:b8:ff:c9:51:74:
                    ce:95:1e:9d:60:0e:fb:5a:24:df:46:b6:83:9b:c6:
                    4c:b9:74:c6:3d:da:f1:b2:78:61:7b:ca:7a:d0:49:
                    7c:34:96:c8:a8:63:2a:40:58:5e:fd:2b:b4:dd:f3:
                    e5:75:b3:b7:19:c1:cc:07:79:8a:3c:00:0a:10:b9:
                    50:d8:f8:86:fc:91:84:60:0f:fc:f3:f4:f2:b4:85:
                    0b:aa:44:b0:52:2b:84:ba:cd:bf:31:84:1a:69:89:
                    45:5c:5e:96:7c:38:3c:0c:aa:10:be:63:1c:bf:5f:
                    56:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:25:A7:16:D5:8E:7E:FF:4C:31:25:FA:03:61:C3:42:E6:4D:FF:F6
            X509v3 Authority Key Identifier:
                keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ad:24:72:a4:38:23:d2:ab:00:d0:0c:30:51:40:87:c3:0b:
         3c:d5:b2:f4:e1:0e:40:93:87:f5:0f:d2:73:a4:c7:43:99:8d:
         3b:a4:5c:29:0d:a7:08:9f:a4:c1:73:ff:ee:76:a4:15:13:f9:
         bc:b3:3f:1d:ae:e1:82:e9:a4:28:36:cd:d8:0a:e5:0c:3f:f8:
         e8:62:33:96:bf:f1:fc:b6:70:e5:02:b6:f8:85:ac:49:7b:1a:
         0a:66:ed:d4:05:58:b3:0c:7c:ca:a0:22:33:d9:93:d8:a5:98:
         52:da:83:26:58:d4:86:0e:14:68:95:bd:09:07:a1:f9:58:9e:
         9c:41:c6:47:c9:f5:25:dc:ab:bf:ff:eb:d3:ba:29:bb:d8:12:
         8b:0d:db:53:2d:c3:0d:f0:ca:bd:80:d8:dd:93:19:c6:c1:16:
         f1:90:a3:52:04:81:6c:30:73:40:b3:dd:48:ee:76:fb:05:a8:
         1b:62:09:d4:64:b0:47:54:04:50:ee:cd:7e:44:75:8e:d6:d3:
         ad:93:87:31:54:ed:94:c7:2c:f8:3e:47:a0:3e:de:21:bb:60:
         3e:43:99:76:27:b5:f5:d6:9a:11:17:6d:92:7f:b9:e9:ab:3f:
         56:33:56:58:79:56:f5:62:b0:63:5d:ab:5d:51:23:ce:1d:29:
         ea:3e:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:23:58 2025 by rpki-client